Mozilla · Firefox Esr · CVE-2016-2814
**Name of the Vulnerable Software and Affected Versions**
Mozilla Firefox versions prior to 46.0
Firefox ESR versions 38.x prior to 38.8
Firefox ESR versions 45.x prior to 45.1
**Description**
The issue is related to a heap-based buffer overflow in the `stagefright::SampleTable::parseSampleCencInfo` function within the libstagefright component. This overflow occurs due to mismanagement of the sizes table when handling crafted CENC offsets, allowing remote attackers to execute arbitrary code.
**Recommendations**
For Mozilla Firefox versions prior to 46.0, update to version 46.0 or later.
For Firefox ESR versions 38.x prior to 38.8, update to version 38.8 or later.
For Firefox ESR versions 45.x prior to 45.1, update to version 45.1 or later.